48330b4c19ba352d97f097546e225683_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

48330b4c19ba352d97f097546e225683_JaffaCakes118
Size

38KB
MD5

48330b4c19ba352d97f097546e225683
SHA1

f1ac1aceb31f023c13231c9e93a95c5224925368
SHA256

eea39dfc20797b2c010629253249f88cf342940b5cd6cb24498a30e39d289a98
SHA512

8520e6f5fc90e608120d86a04f7f7ddb9b7f76f814622f125f247554d0e96ced7b3752be03184941b38e8d68fa99e2da063291c02dd20dfc5743c57676059625
SSDEEP

768:qGixXJTmcquFUA4pCsqfp2svQ+qRlgVcB/Seelc71WJZ:qj8uFaCVFY+qFhS5iYL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
48330b4c19ba352d97f097546e225683_JaffaCakes118

Files

48330b4c19ba352d97f097546e225683_JaffaCakes118
.exe windows:4 windows x86 arch:x86

399c9f076e8dab08a1e6586d6aa70ea4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindResourceA
CreateFileA
GetTempPathA
FreeResource
CloseHandle
SizeofResource
LoadResource
WriteFile
LockResource
lstrcatA

shell32

ShellExecuteA

Sections

.text
Size: 736B - Virtual size: 736B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_INIT_
Size: 32B - Virtual size: 6B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE